Static task
static1
Behavioral task
behavioral1
Sample
6538266234c3312d5fe625f08fd1dd96_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6538266234c3312d5fe625f08fd1dd96_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6538266234c3312d5fe625f08fd1dd96_JaffaCakes118
-
Size
57KB
-
MD5
6538266234c3312d5fe625f08fd1dd96
-
SHA1
51fe132f73e5bca1e6f04d177f8e5ea66e7a8ef6
-
SHA256
c1488167dceb69083daa72a36b0c47ab52cdc37f5a0e4aafe72678de5c64fb04
-
SHA512
c6f135e897e8f9f4f74c79cd9c2d70a345812e0b2c3d17df1a00449ebe8ebe5d9ba75f2002c0cf5453115cbac7b3c0a3cf6a94328b32f1408861434d2f1ad76f
-
SSDEEP
768:xd/CppwX/cpjfdCjvjeKm/lJDKN2+SHmpHhK50qJKZpkaH00SgmE:LCbE/eKOJDI1SH6B+0qUZGXPgd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6538266234c3312d5fe625f08fd1dd96_JaffaCakes118
Files
-
6538266234c3312d5fe625f08fd1dd96_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 47KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE